diff --git a/docs/rolereference.rst b/docs/rolereference.rst
index 51089c160b5a55e28edd151b63337b4d6bf89f12..1d15010a572c6143a63d58b0b665e25826b78163 100644
--- a/docs/rolereference.rst
+++ b/docs/rolereference.rst
@@ -392,14 +392,15 @@ Parameters
 **maintenance** (boolean, optional, ``False``)
   Specifies if maintenance mode should be enabled or not. In
   maintenance mode incoming TCP connections are allowed only from
-  explicitly listed hosts (see ``maintenance_allowed_hosts``
+  explicitly listed hosts (see ``maintenance_allowed_sources``
   parameter). All ports are covered by this rule, with sole exception
   being the TCP port 22 (SSH). The SSH port is never blocked via
   maintenance mode.
 
-**maintenance_allowed_hosts** (list, optional,  ``[]``)
-  List of hosts that should be allowed to connect to the server when
-  in maintenance mode.
+**maintenance_allowed_sources** (list, optional,  ``[]``)
+  List of source addreses (IPv4 or IPv6) that should be allowed to
+  connect to the server when in maintenance mode. Subnets can be
+  specified as well.
 
 **ntp_servers** (list, optional, ``[]``)
   List of NTP servers to use for synchronising the time on managed